VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, August 2021 Edition

Krebs on SecurityAug 11, 2021 · 00:03 UTC (Aug 11, 2021)4 min read2 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-36948 CVE-2021-36936 CVE-2021-34481 CVE-2021-34535 CVE-2021-26424

Tags: cve-2021-36948 cve-2021-36936 cve-2021-34481 cve-2021-34535 cve-2021-26424 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26424 +1 related CVE CVE-2021-36936	Windows TCP/IP Remote Code Execution Vulnerability	9.9 group max	61%		Aug 12, 2021
CVE-2021-34481	A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations	8.8	48%		Jul 16, 2021
CVE-2021-34535	Remote Desktop Client Remote Code Execution Vulnerability	8.8	22%		Aug 12, 2021
CVE-2021-36948	Privilege Escalation in Microsoft Windows Update Medic Service	7.8	23%	KEV	Aug 12, 2021 KEV Nov 3, 2021

From the original article

4 min read at krebsonsecurity.com

Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products. The software giant warned that attackers already are pouncing on one of the flaws, which ironically enough involves an easy-to-exploit bug in the software component responsible for patching Windows 10 PCs and Windows Server 2019 machines.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.